DV SSL/TLS Certificate for www.sk-cosmetic.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.sk-cosmetic.ru DV SSL/TLS Certificate

This certificate with serial number 56:a1:e5:dc:8d:60:81:b6:de:95:81:cc for www.sk-cosmetic.ru was issued on by GlobalSign nv-sa.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.sk-cosmetic.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 56:a1:e5:dc:8d:60:81:b6:de:95:81:cc
Serial Number (int): 26811433391989189551844590028
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: 99:3b:61:ea:8c:f0:9e:0d:db:dc:1d:2e:17:30:e6:f0:a1:c0:1f:31
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): a0:77:cb:ba:c6:de:7d:c7:af:fa:51:4d:17:37:b7:ac:aa:c2:1e:70
Fingerprint (SHA-256): 77:64:e4:50:b4:dd:88:ef:79:a3:07:69:a0:67:1e:84:3b:28:47:33:68:cb:b9:7f:23:d7:8c:7a:06:cb:d4:ed

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.sk-cosmetic.ru
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.sk-cosmetic.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.sk-cosmetic.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26811433391989189551844590028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 07:31:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-16 07:31:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sk-cosmetic.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825715027085407056557780364106111386289320754756910698607192660348809213995998160724490448743803108219632326748192414365809217844416660907678231457427749324718520906496351807172480018525788391813630063634880472336162275419713611374497096646416690627050535880969210466060270352799008263521630250743572213766449059412093367410617473013432905211215689331583221813658846197382170119016824642814696310470970988512905844315852275580908342824124675892311038704810252529037805281703359548897288232023869622180120742466540609574535151633219628140139574502345691155846501863309841828196206623375694138098906688289453808785580707482910189184481145564451638827348142943449460679348274812011146261914079442714418072046829108366658975523557700845599188033508324660143467355849188499632418900474824701564899877190202716657170697701346595548557424533964200498451570863771732688046313280504755805240771492289088396341766473607179558690455184113387819130078621866955098284017143798112578377662802976793336208750537627703535750125716814567864528099788760255118601293887702595907173748503818241799052279190031100183760897581294577316212011556037585947027693120303155864586102255285488486262501358163362521590533368347149173803276975194010164633941586751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sk-cosmetic.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sk-cosmetic.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sk-cosmetic.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.sk-cosmetic.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk-cosmetic.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							993b61ea8cf09e0ddbdc1d2e1730e6f0a1c01f31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500944e4387faecc1ef81f3192426a8186501c7d35f3802013f72677d55372e19d8000001976d598250000004030046304402205f1431e452c8f8928edb3feb9dc5854c21d2accebe243f696fc24f77102689a7022056f42a7915bb76d310c5a6d90a555b800b94465ac252868386fb199ebc8ae869007600cb38f715897c84a1445f5bc1ddfbc96ef29a59cd470a690585b0cb14c31458e7000001976d5980af00000403004730450220097fc67aae1a36b5d0394b30c1505660ecd7c6027c4a2a01835e3148ae55205f022100e188fc8254ca39eafaa2d054ba152ab1246b9b53171f62e69b89b77c5d49d32d007600c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd000001976d598220000004030047304502207d7d0315fe55568674039041758755445a6790276212d93537b2958046c65b3a022100ca2280f852713842ac58b8e64bea36eba50d1d9d0677a5a83d109b7ea4a3906a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027b2c880162af414672b59adfef937fdbb2f11f36ede88a3c7e128a2937486ea50748c9593a3fdc1076a2c9f0b6013dce86d5caa596ddca8d77d71d8c944f0be8450eb8acae5f36735a9f10caf0cddf6bd05d47189a3d3a31e39bd51b0f2375addfc4ddde4f388e9ef7cbb888e98515bea526e9187a5180b15a83d9a4c2995bac623f111c908a596c4f67130b00356fa411570f9669d590c6398bdd494cdcd687e50545caee5f9106b937d9e1d7c434d77681be619c39188e9bc694a9943d0877cdc80fa69ee1a7a160c905e601f93f4d12ca7f8991f48bacb5b8b4fe473113d5db94dfe50c1651cd9ee2e6055766cb5b696f390cb0727b0e643d4f63e6014e4